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Abstract 

The (extended) AGM postulates for belief revision seem to deal 
with the revision of a given theory K by an arbitrary formula tp, but 
not to constrain the revisions of two different theories by the same 
formula. A new postulate is proposed and compared with other sim- 
ilar postulates that have been proposed in the literature. The AGM 
revisions that satisfy this new postulate stand in one-to-one corre- 
spondence with the rational, consistency-preserving relations. This 
correspondence is described explicitly. Two viewpoints on iterative 
revisions are distinguished and discussed. 



1 Introduction 



*This work was partially supported by the Jean and Helene Alfassa fund for research 
in Artificial Intelligence 
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1.1 Belief Revision 



Belief revision is the study of the way an agent revises or should revise its 
beliefs when acquiring new information. A popular framework for this study 
has been initiated by Alchouron, Makinson and Gardenfors in |T], |3|, in 
which a set of rationality postulates for theory revision were put forward. It 
assumes beliefs are sets of formulas closed under logical consequence (i.e., the- 
ories) and that new information is a formula. The present work fits squarely 
in this framework. An up-to-date description of this very active research area 



may be found in |T(|. The basic assumptions underlying AGM's viewpoint 
may be summarized as follows. 

• The agent holds beliefs: those beliefs constitute some logical theory. 
There is no additional structure to the agent's theory. No beliefs are 
stronger than others. 

• The agent's knowledge is changing but the world is not. Keller and 



Winslett |15| noticed that updating an agent's knowledge about a chang- 
ing world is a process that is altogether different from theory revision. 
Katsuno and Mendelzon |14]] proposed different postulates for belief 
update. 

• When a new piece of information ip is presented to an agent that holds 
a theory K with which ip is inconsistent, the agent will give precedence 
to the information ip, over the theory K. The theory K is considered as 
less important or less reliable than the new information ip with which 
it conflicts: the agent revises a weakly held theory with a piece of more 
reliable information. This policy is obviously not the right one in every 
situation, but AGM assume the agent must have some good reason to 
prefer ip to K. As noticed just above, this reason is not that ip describes 
some change in a world the previous state of which was described by 
K. 

• When revising a theory K with some formula ip, the agent will try keep 
as much as possible of its previously held beliefs: K. In particular, if ip 
is consistent with K, the agent will keep all of K in its new belief set. 
This assumption will be called the maximal retention assumption. 

AGM did not describe any specific method to revise theories that would be 
the right way of revising under the assumptions above. They thought that 
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there is probably no unique best way of revising. Instead, they proposed a 
set of rationality postulates they claimed any reasonable method for belief 
revision should satisfy. The original postulates were extended in [TT|. This 



work accepts, under the assumptions above, the extended AGM postulates. 
These postulates are meant to express formally the basic assumptions de- 
scribed above. These postulates will be presented now and their adequacy 
in expressing those basic assumptions will be discussed in section |Oj 

1.2 The AGM postulates 

The AGM postulates for belief revision are listed below: Cn denotes logical 
consequence and, for an arbitrary theory K (i.e., K is a set of formulas 
closed under logical consequence), K*tp denotes the result of revising K by 
(p. The inconsistent theory, i.e., the full language, is denoted by K±. It is 
a legal argument for *. This paper could have been developed in the more 
demanding framework, where the first argument of a revision, K, must be a 
consistent theory: the results are essentially the same. 

For a justification of these postulates, in addition to the papers cited 



above, the reader may also consider JES), [7|, [19], [L2|, Since the notion of 
a revision is considered by philosophers as not being primitive, but derived 
from that of theory contraction, the justification of the postulates below is 
generally given by justifying corresponding postulates for contractions and 
translating back and forth with the help of the Levi and Gardenfors identi- 
ties. Not all specialists are in complete agreement concerning the philosoph- 
ical underpinnings of theory revision, the status of the Levi and Gardenfors 
identities, or of the postulates below. The present work does not attack 
those deep questions directly, but presents technical results concerning the 
postulates that, in turn, help understand what are the processes that the 
postulates may reasonably be thought of as modelling and what are those 
they do not model satisfactorily. For any theory K and formulas ip and ip: 

K*l K*<p is a theory. 

K*2 ip E K*(p. 

K*3 K*ipCCn(K,ip). 

K*4 If ^(p £ K, then Cn(K, (p) C K*(p. 
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K*5 If K*ip is inconsistent, then tp is a logical contradiction. 

K*6 If \= tp if), then K*<p = K*ip. 

K*7 K*(ip A ip) C Cn(K*ip, tp). 

K*8 If -1-0 £" i£*<^, then Cn(K*ip,ip) C i£*(<p A -0) 

The reader may notice that, in each of the postulates in which the revision 
symbol (*) appears more than once (K*6, K*7 and K*8), the theory that 
appears on the left of the different occurrences of the revision symbol is the 
same. We take this as an indication that those postulates do not say much 
on the way the revised theory K*ip depends on K. We shall come back to 
this point in section |1.3| . We shall call a revision K*tp a mild revision, when 
-up (jL K and a severe revision, if -up £ K. 

The AGM postulates have been found to be intimately related to rational 
consequence relations (see |17B ). The translation is precisely described by the 



following Theorem. 

Theorem 1 If * is a revision operation that satisfies the AGM postulates, 
K*l-K*8 ; and K is a theory, the relation K^'* defined by 

a\^ K '* (3 iff (3 £ K*a (1) 

is rational and consistency-preserving. 

Proof: We just remind the reader that consistency preservation is the follow- 
ing property: if a |~ false, then a is a logical contradiction. The definition 
of all the other properties mentioned in this proof may be found in |TJ| . Sup- 
pose K is a theory and * satisfies the AGM postulates. The consequence 
relation satisfies Reflexivity by K*2, Left Logical Equivalence by K*6, 

Right Weakening and And by K*l, Conditionalization (i.e., (S)) by K*7, 
and Rational Monotonicity by K*8. It is consistency-preserving by K*5. 
Any such relation is rational. | 

Notice that postulates K*3 and K*4 are not used in the proof of Theorem |l[ 
This point will be discussed after we have proved Theorem 0. 

One may expect the converse to Theorem [l| to hold: if |~ is an arbitrary, 
rational and consistency-preserving relation, then, there is a theory K and 
a revision * satisfying K*l-K*8 such that a |~/3 iff (3 £ K*a. This result 
holds. It is not difficult to present a direct proof at this stage. An indirect 
proof will be preferred and presented in Theorem f|. 
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1.3 Critique of the AGM postulates 

The AGM postulates have been discussed in the literature, in particular 
in [14| and ||. Some authors reject some of the postulates, in particular 
K*8, the same and others propose to extend the AGM postulates by addi- 
tional postulates. The main line of critique of the AGM postulates seems to 
be that they do not constrain the revisions enough: some revisions allowed by 
the postulates do not seem reasonable. There are three points, in particular, 
on which it seems that the postulates do not say enough, or, more precisely, 
one could feel that additional acceptable postulates may be proposed. 

• The postulates do not seem to enforce the principle of maximal reten- 
tion when the formula 92 is inconsistent with the theory K. 

• They do not seem to impose enough constraints on the revision of two 
different theories by the same formula, or by related formulas. 

• They do not seem to enforce enough constraints on iterated revisions, 
e.g., concerning the relation between K, ip, ip and (K*Lp)*ip. 

The proposals to drop some of the AGM postulates seem to stem from the 
desire to add some other postulates with which they are inconsistent, more 
than from a direct critique of the postulates in question. The first point 
raised above has been the reason for the interest in maxichoice contractions 
manifested by AGM, but no suitable additional postulate has been proposed 
to deal with it. The second point has been very aptly discussed in |HJ. The 



authors write: "Revision is an operation of two arguments, forming A*x out 
of theory A and proposition x. On the other hand, nonmonotonic inference 
conceived as an operation C(x) defined as {y \ x |~ y} is a function of only 
one argument x. For this reason the logic of theory change is potentially 
more general than the logic of nonmonotonic inference, in that it allows the 
possibility of variation in the other argument A. Potentially, because this 
possibility has hardly been explored. The postulates for revision presented 
in || all concern the case where the theory A is held constant 1 . We shall 
show, in the sequel, that the third point is intimately related to the second 
one. This paper will present an additional postulate constraining the way 
one may revise different theories by the same formula. Its main result is 
that this additional postulate precisely reduces the generality of revisions in 
a way that makes revision isomorphic to nonmonotonic inference. It will be 
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shown that some of the additional postulates proposed in the literature are 
incompatible with the AGM axioms and that those that are not, are implied 
by our postulate. 



1.4 Plan of this paper 

In section 0, the additional postulates that were previously proposed in the 
literature, by Katsuno and Mendelzon on one hand, and by Darwiche and 
Pearl on the other hand, are described and discussed. In section ^| the mini- 
mal influence postulate, K*9, is presented and justified on intuitive grounds. 
Some first consequences of K*9 that concern iterated revisions are then 
proven. In section [0] and its relations with the postulates of sections ^]T] 
and |2.2| , respectively, are analyzed. In section |4.1| , we prove the main result 
of this paper: revisions that satisfy K*l to K*9 stand in one-to-one corre- 



spondence with rational, consistency-preserving relations. In section [4.2| a 
conservative extension result, a model-theoretic description of revision, and 
the converse to Theorem [l| are proven. We discuss, then, in section O , the 



meaning of this result for the ontology of theory revision. Section [| discusses 
the existence of two conflicting views on iterated revisions, concludes and 
describes some open questions. 



2 Additional postulates previously proposed 

2.1 The Katsuno and Mendelzon postulate 

In ||14|| , Katsuno and Mendelzon considered the following postulate. 

U8 (K n K')*<p = (K*tp) n (K'*ip). 

Reasonable as it seems, this postulate is nevertheless inconsistent with the 
AGM postulates. This is probably the reason why Katsuno and Mendelzon 
dropped or weakened some of the AGM postulates in the final version of their 
paper. The postulate that will be proposed in this paper is closely related to 
U8, therefore we shall analyze it in some detail. Our first remark is that any 
revision that satisfies the AGM postulates also satisfies a special case (the 
mild case) of U8. 
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Proposition llf* satisfies K*3 and K*4, then, for any (p such that -up (jL K U K' , 

(K n K')*tp = (K*ip) n (K'*ip). 



The proof is obvious. Our second remark is that U8 may be broken into two 
halves. 

Proposition 2 The postulate U8 is equivalent to the following two proper- 
ties: 

U8.1 If K C K', then A*(/? C K'*<p, and 

U8.2 (A*<^) n (K'*cp) C(Kfl K')*(p. 

The proof is obvious. Property U8.1 has been named the postulate of Ad- 
dition Monotonicity and considered by Gardenfors, Makinson and Segerberg 
in [|[ [22, Despite its intuitive appeal (shouldn't the revised theory de- 



pend monotonically on the revised theory?), it has been shown to be incon- 
sistent with the AGM postulates. 

Proposition 3 There is no revision operation that satisfies K*4 ; K*5 and 
U8.1. 

Proof: Suppose * satisfies K*4 and U8.1. Let <p> be an arbitrary formula 
that is not a logical contradiction. By U8.1, we have: 

Cn(tp)*true C Aj_*true. 

But, since ip is not a logical contradiction, -itrue ^ Cn(ip) and, by K*4, 
we have Cn(Cn(ip), true) C Cn((p)*true. We conclude that ip G Cn(yj)*true, 
and, therefore, ip € Aj*true. But the set of all formulas that are not a logical 
contradiction is inconsistent and Aj*true is inconsistent, contradicting K*5. 
I 

It will be shown in section |3.3| that the additional postulate we propose, K*9, 
implies U8.2 and a special case of U8.1. 
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2.2 The Darwiche and Pearl postulates 

In |J, Darwiche and Pearl proposed four additional postulates. Notice that 
K*ip*(p means (K*ip)*tp. 

(CI) If p> \= ip, then K*ip*ip = K*<p. 

(C2) If <p |= then K*ip*p> = K*(p. 

(C3) If -0 G A*(/?, then -0 G K*ijj*(p. 

(C4) If -t0 G" A*<£>, then -iip G" K*ifj*(p. 

It will be shown in section [T4| that the postulates (CI), (C3) and (C4) 
are implied by our additional postulate K*9. The justifications given by 
Darwiche and Pearl for those postulates are therefore indirect justifications 
for K*9. The postulate (C2), contrary to the claims of Darwiche and Pearl, 
is inconsistent with the AGM axioms. 

Proposition 4 There is no revision that satisfies K*l-K*4 and (C2). 

Proof: Suppose * satisfies K*l-K*4 and (C2). Let tp be any tautology, say 
true and ip be any logical contradiction, say false. We have true |= -ifalse. 
The postulate (C2) therefore implies that /&false*true = A'*true. But, 
for any theory K, A* false = K± by K*l and K*2. Therefore, for any A, 
A*true = ApKtrue. But, by K*3 and K*4, for any consistent theory A, 
A*true = A. Since A^*true does not depend on A, we conclude that all 
consistent theories are equal. A contradiction. | 

3 The minimal influence postulate 
3.1 The postulate 

The postulate we propose to add to the AGM postulates is the following. 

K*9 For any theories A, A' such that -up G A, -up G A' K*ip = K'*ip. 

The postulate K*9 is obviously equivalent to: if -up G A, then K*ip = K±*(p. 
Its meaning is that, if -up is an element of A, i.e., the revision of A by <p> is 
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a severe revision, then the result of revising K by tp does not depend on K. 
Any revision that satisfies K*3, K*4 and K*9, satisfies: 

'^* t f > | Cn(K,ip) otherwise. ^ 

Such a revision is therefore determined by its restriction to K±. K*9 char- 
acterizes those revision systems in which the revision K*tp depends mainly 
on tp and only minimally on K (in the case of a mild revision). Remark also 
that, for any revision * that satisfies K*3 and K*4, the new postulate K*9 
is equivalent to: K*tp = Cn(K, tp)*tp. 

The postulate K*9, at first sight, does not seem to be what one is looking 
for. First, it seems in danger of being inconsistent with the AGM postulates. 
This concern will be addressed in full in section [|. But, also, one probably 
feels that the revisions of K should depend on K in a major way, even 
when one considers a severe revision. The feeling that some postulate should 
be added is widespread and this paper will present formal arguments as to 
why K*9 is the right postulate to add. Those reasons will not completely 
dissipate a first negative reaction to K*9. The source of this clash between 
formal arguments and intuitive reaction probably lies in the philosophical 
underpinnings of theory revision and the general framework chosen by AGM 
to study theory revision. This paper claims that, in the framework chosen 
by AGM, K*9 is the right postulate to be added. The AGM framework does 
not seem to be the one in which to study iterated revisions. 

We shall now present direct justification for K*9. The postulate K*9 is a 



special case of Darwiche and Pearl's postulate (C2) described in section ^72 
assuming K*l and K*2. Take, there, if) to be a logical contradiction. Since 
K*ip = K±, one obtains K*9. Anybody convinced by their defense of (C2) 
will endorse K*9. Our defense of K*9 will be presented now. Notice that K*9 
is equivalent to the following two properties: they will be justified separately. 

K*9.1 For any theory K such that -><p 6 K, K*ip C K±*tp 

K*9.2 For any theory K such that -up 6 K, Kj*tp C K*tp 

The first, K*9.1 is relatively easy to justify. It is a special case of U8.1, i.e., 
the postulate of Addition Monotonicity. This postulate has been favorably 
considered by many: it is very natural to hope that the more is believed 
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before a revision, the more is believed after. None of the many articles cited 
above that discuss this postulate rejects it on the grounds its meaning seems 
unwanted, and the only problem found with it has been that it is inconsistent 
with the AGM postulates. The special case proposed here, K*9.1, does not 
fall prey to this criticism, it is consistent with the AGM postulates, and 
should be adopted. 

The second, K*9.2, is more difficult to justify. A formally weaker postu- 
late, K*9.2', will be presented and justified in a direct way. It will then been 
shown that, in the presence of other AGM postulates, it implies K*9.2. The 
consideration of a similar property was suggested by Isaac Levi. 

K*9.2' If if) G K and if) G K±*p, then if) G K*ip. 

Our justification for K*9.2' is the following. If if> G K, then the principle of 
maximal retention implies we should try to keep if) in K*tp. If if> G K±*<p, we 
know that if) may be kept in K*ip (in particular if) does not contradict p), 
K*9.2' says that, in this case, we should have if) in K*tp. It is easy to see 
that K*9.2 implies K*9.2', in the presence of K*4. It will now be shown that 
K*9.2' implies K*9.2. 

Proposition 5 Any revision * that satisfies K*l ; K*2 and K*9.2' satisfies 
K*9.2. 

Proof: Let * satisfy K*l, K*2 and K*9.2'. Suppose -xp G K, and if) G Kj*(p. 
We must show that if) G K*(p. But, ip — > if) G K±*ip and ip — > if) G K. By 
K*9.2', we conclude that ip — > if) G K*p. By K*l and K*2, then, if) G I*<p. 
I 

The rest of this paper is devoted to proving consequences of K*9: the 
intuitive appeal of those consequences provides indirect justification for it. 



In particular, in sections and ^J, it will be shown that K*9 implies most 
of the additional postulates that have been previously proposed in the lit- 
erature. All the arguments in favor of those postulates, in particular those 
developed in |J for (CI), (C3) and (C4), provide indirect support for K*9. 
Our representation result, Theorem ^|, and the analysis of section |4.3| provide, 
both, a soundness result that shows that many revisions satisfy K*l-K*9, 
and an ontology for those revisions. This provides additional indirect justi- 
fication for K*9. 



10 



It seems that K*9 contradicts, in a certain degree, the assumption of 
maximal retention. If -up 6 ATI K', and ip G K but ip ^ K', then a revision 
* that satisfies K*9 will have to let go of ip when revising K by tp or to let 
go of -up when revising K 7 by p. The meaning of this remark is that one 
cannot retain maximally always, one must compromise with the assumption 
of maximal retention in certain cases to be able to apply it in other cases, 
as, e.g., in the justification of K*9.2'. 

3.2 First consequences: iterated revisions 

Our understanding of the AGM framework, in which revisions are operations 
of two arguments, a theory and a formula, does not require any special men- 
tion of iterated revisions: the result of revising K first by ip and then by p 
is the result of revising by p the theory that is the result of revising K by ip. 
Some authors, for example 0, Q and take a different view and prefer 
to treat revisions as operating on a fixed theory and treat iterated revisions 
as a special case of varying this theory. This attitude is methodologically at 
odds with the AGM point of view, and we shall argue, in section |5.1| , that it 
tries to answer a different question. Discussion about this approach and its 
relations to the present work is postponed to section |5TT| . 

It is interesting to consider the meaning of our postulate for iterated 
revisions. There are two fundamental cases to consider: the case where 
revising by ip and then by tp is equivalent to revising by the conjunction 
ip A tp, and the case where it is equivalent to revising by the second formula 
alone, tp. Our result concerning the first case does not use K*9: if the second 
revision is mild then the iterated revision is equivalent to the direct revision 
by the conjunction. 

Proposition 6 Let * be a revision operation that satisfies K*l-K*8. If 
-itp (jL K*ip, then (K*ip)*p = K*(ip A cp). 

Proof: Assume ->tp G" K*ip. By K*7 and K*8, Cn(K*ip, tp) — K*(ip Aip). By 
K*3 and K*4, Cn(K*ip, p) = (K*ip)*p. | 

For the second case, we have three different results. First, K*9 alone implies 
that K*ip*p = K*p if one has -up G K*ip and ->p G K. Secondly, we have 
the following. 
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Proposition 7 Let * be a revision operation that satisfies K*l K*9. If 
-up G K*(ip V tp), then (K*ip)*tp = K*tp. 

Proof: Suppose —up G K*(ip V tp). We are going to show that -up is an 
element of both K*ip and K and we shall conclude by K*9. To show that 
-up G K*ip, we consider two cases. First, if —tip G" K*(ip V tp), by K*8 and 
K*6, we have 

-up G Cn(K*(ip V tp),ip) C K*((ip V tp) Aip) — K*ip. 

Secondly, if —<ip G K*(ip V </?), since -><p and are also elements of K*(ip V tp) 
(by K*2), we conclude that K*{ip V 99) is inconsistent. By K*5, ip V tp is a 
logical contradiction and -199 is a tautology and, by K*l, an element of K*ip. 
It is left to us to show that ->p G K. But, by K*3, 

-^<p G K*(ip V p) C Cn(K, ^ V y?) C Cn(K, </?). 

We conclude that -up & K. | 

The third result of this family is perhaps the most striking. It generalizes 
the postulates (CI) and (C3) of Darwiche and Pearl. 

Proposition 8 Let * be a revision operation that satisfies K*l-K*9. If 
ip G K*tp, then [K*ip)*p = K*ip. 

The meaning of Proposition ^| is very natural: if revising K by tp would 
convince the agent that ip is true, then revising K, first by ip, and then by 
tp amounts to revising, first by ip, and then by some information, tp, that 
conditionally implies the first information. This boils down to revising first 
by some partial information and then by the full information. This is indeed 
expected to be equivalent to revising directly by the full information. 
Proof: Suppose ip G K*tp. Two cases will be considered. Suppose, first, 
that -up G" K*ip. By Proposition [], (K*ifi)*tp = K*(ip A tp). But ip G K*tp, 
and, by Theorem [I] and the properties of rational relations, tp \^ K '* ip implies 
that, for any \, tp \r^ K '* ^ iff tp A ip \~ K '* x- Therefore K*tp = K*(tp A ip). We 
conclude that (K*ip)*tp = K*tp. 

Suppose, now, that ->tp G K*ip. By K*3, -xp G Cn(K, ip) and ip — > G K. 
But ip G K*tp, and, similarly, tp — > ip G K. We conclude that -up G K. By 
K*9, then, (K*ip)*tp = K*tp. | 

In the next sections, we shall examine in detail the relation between K*9 and 
the postulates previously proposed by, both, Katsuno and Mendelzon, and 
Darwiche and Pearl. 
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3.3 K*9 and U8 

Our first result is that any revision that satisfies K*9 satisfies a special case 
of U8. 

Proposition 9 Let * be any revision operation that satisfies K*9. If -up G ATI K' , 
then (K*<p) n (K'*<p) = (K n K')*<p. 

The proof is obvious. Our second result deals with U8.2. 

Proposition 10 Any revision operation * that satisfies K*3, K*4 and K*9 
satisfies U8.2. 

Proof: For any revision * that satisfies the assumptions, we must show that 
(K*ip) H (K'*<p) C(Kn K')*<p. Suppose, first, that -xp # K n K' . By K*4, 
Cn(K n K', ip)C(Kn K')*<p. By K*3, 

(K*<p) n (K'*ip) C Cn( J fC, yj) n Cn(K', v?) = Cn(K f] K', ip). 

Suppose, now, that -199 G K fl K'. We conclude easily by Proposition ||. | 

Our conclusion is that K*9 implies all the cases of U8 that are consistent with 
the AGM postulates, the case that is inconsistent with the AGM postulates 
being, as shown in Proposition [3], the case in which -up is in K but not 
in K' . In this case the revision of the intersection may be larger than the 
intersection of the revisions. 

3.4 K*9 and the Darwiche and Pearl postulates 

Let us, now, consider the postulates proposed by Darwiche and Pearl. We 
have seen, in Proposition ^, that no revision may satisfy (C2), but the fol- 
lowing special case of (C2) is a consequence of K*9. 

Proposition 11 Any revision operation * that satisfies K*l ; K*2 and K*9 

satisfies: 

(C2') If -i(p G K and (p \= then K*ip*ip = K*<p. 
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Proof: Suppose —up G K and ip \= —up. By K*9, it is enough to prove that 
-up G K*ip, but this is the case since ip \= -up. | 

We shall now show that the other postulates considered by Darwiche and 
Pearl are consequences of K*9. 

Proposition 12 Any revision operation * that satisfies K*l K*9 satisfies 
(CI), (C3) and (C4). 

Proof: For (CI), suppose ip \= ip. By K*l and K*2, ip G K*ip and, by 
Propostion |8|, we conclude that K*ip*ip = K*ip. 

For (C3), assume that ip G K*ip. By Propostion §| K*ip*ip = K*ip. We 
conclude that ip K*ip*ip. 

For (C4), assume that -f0 G" We must show that -up G" K*ip*ip. As- 

sume, first, that -up G" m this case, by Proposition^, K*ip*p> = K*(ip A ip). 

But -t0 G" i&v 3 an d therefore, by K*l, ip \£ -up and ip A ip is not a logical 
contradiction. By K*5, then, K*(ip A ip) is consistent and -t0 G" K*(ip A ^). 
We conclude that G" K*ip*ip. Assume, then, that -up G K*ip. By, K*3, 
^ — > -up G 1C We shall show that —up G K and conclude, by K*9, that 
K*ip*<p = K*ip. To show that -up G if, it is enough, by K*4, to show that 
K (t K*ip. We shall show that ip — > -up G" K*ip, i.e., y — > -up G" i£*<£>. Since 
</? G f&<£>, it is enough to show that —iip G" K*ip, which holds by hypothesis. 
I 

As a corollary, we realize that (CI), (C3) and (C4) follow from (C2'). 

Corollary 1 Any revision operation * that satisfies K*l K*8 and (C2'), 
satisfies (CI), (C3) and (C4). 



Proof: We shall show that * satisfies K*9 and conclude by Proposition |12 
Suppose -up G K. Since, ip \= -i false, by (C2'), we have K*ip = K*false*ip. 
But, by K*l and K*2, K* false = K ± . | 

We have brought additional indirect justification for K*9: it implies all the 
postulates proposed by Darwiche an Pearl, except (C2), that has been proved 
inconsistent. Some special case of (C2) is also implied by K*9. 

4 Representation of revisions by rational re- 
lations 



14 



4.1 Representation result 



We shall now prove the main result of this paper: revision operations that 
satisfy K*l K*9 may be represented by rational, consistency-preserving re- 
lations. There is, even, a bijection between the former and the latter. This 
result is an improvement on the results of | 17| , that described a bijection be- 
tween AGM revisions of a fixed theory L and rational, consistency-presrving 
relations |~ such that L = {a | true |~ a}. This correspondence shows that 
the postulate K*9 is consistent with the AGM postulates: there are revisions 
that satisfy K*l K*9, as many as rational, consistency-preserving relations. 



Theorem 2 There exists a bijection between the set of revisions that satisfy 
the postulates K*l K*9 and the set of consistency-preserving, rational rela- 
tions. This map associates to every such revision * the relation defined 
by: 

<p I~* ip iff ip G K±*if. (3) 

The inverse map associates to any rational, consistency-preserving relation 
|~ the revision *^ defined by: 

K*^cp = I { ^ 1 ^ h ^ if T e K (A) 
1 Cn(K, ip) otherwise. 

Note that the relation defined in (|3|) is none other than the relation 
|~ ifx >* defined in Theorem [I]. Note also that the revision *^ defined in (|4]) 
from the relation |~ has a very natural meaning. It says that, in the case 
of a mild revision, revise as mandated by K*3 and K*4, and in the case 
of a severe revision, disregard K (since it is contradicted by the more solid 
information (p) and replace it by ip together with all the formulas that the 
agent thinks are usually true when ip is. 

Proof: Suppose first that * is a revision that satisfies K*l to K*9, and 
let us show that the relation defined in (^) is rational and consistency- 
preserving. This follows from Theorem [I] applied to K± and *, since is 
|~ x >*. Note that K*3, K*4 and K*9 are not used in this part of the proof. 

Suppose now that |~ is a consistency-preserving, rational relation and let 
us show that the revision *^ defined in (HD satisfies K*l-K*9. The cases of 
K*l (by right weakening and "and"), K*2 (by reflexivity) , K*3 (if -up G K, 
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Cn(K,p) = K±), K*4 (by definition), K*6 (by left logical equivalence), and 
K*9 (by definition) are easily dealt with. Let us show that *^ satisfies 
K*5. Suppose K*^p is inconsistent. Then, either ip |~ false or -up G" K 
and Cn(K, ip) is inconsistent. The latter is impossible, therefore p |~ false 
and we conclude by consistency-preservation. For K*7, we must show that 
K*^((p Aip) C Cn(K*^p,ip). We shall consider two cases. Suppose first 
that -up G K. Then -i(<p A ip) G K too. Suppose x e K*~(<P A ip). Then, 
p A ip |~ x- By conditionalization (i.e., rule S), we have p |~ ip — > x an d, 
since -up G if, ip — > x e K*~P- Therefore, x £ Cn(K*^<p,ip). Suppose now 
that -i</? G" -ft'. Then, K*^p = Cn(K, ip), and Cn(K*^p, ip) = Cn(K, tp A ip). 
But we have already shown that *^ satisfies K*3, therefore 

K*„((p A ip) C Cn(if, p> Aip). 

Finally, for K*8, suppose -t0 G" K*^<p. We have to show that 

Cn(K*^p, ip) C K*^(p A -0), 

or, equivalently that if -0 — > x e K*~<p, then, x £ K*^(p A We consider 
again two cases. If, first, —up G X, then y9 |~ ip — » x and also p ty> -up, there- 
fore, by rational monotonicity, p A ip |~ ip — ■> x an d, by "and" and right weak- 
ening, (p A ip x- But -i<^ G X and therefore ->((p Aip) & K and we conclude 
that x £ K*^(p A ip). The second case we must consider is: -k/? G" if. Then 
K*„(p = Cn(K, p) and, by hypothesis, -up is not a member of this set. This 
implies that —up V -up G" K. Therefore, K*^(p Aip) = Cn(K, p Aip). There- 
fore K*^p = Cn(K, p) C K*^(p A ip). 

To complete the proof of the representation theorem, we have to show 
that the maps |~i — > *^ and * i — ► |~* are inverse maps, i.e., that |~*^ = l~ 
and that = *. For the first equality, we have <p |~*^ ip iff ip G K±*^p, iff 
p |~ ip since -up G K±. For the second equality, we have 




{ip | p |~* ip} if -up G if 
Cn(K, p) otherwise. 



Therefore, 




Kj*p if G if 
Cn(K, p) otherwise. 
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But, if -up G K, by K*9, K±*p = K*(p, and if -up G" K, by K*3 and K*4, 
Cn(K, if) = K*(f. Notice that the postulates used now, K*3, K*4 and K*9 
are those that were not used in the first part of this proof. | 

In section |1.2| , in the discussion following the proof of Theorem [l], we noticed 
that any theory K and any revision operation * that satisfies K*l, K*2 and 
K*5 to K*8 defines a rational, consistency-preserving relation, the relation 
\r^ K '* defined in formula (fj). We have shown, in Theorem |2|, that any such 
relation is defined in this way by a specific theory K± and some revision 
operation that satisfies not only K*l, K*2 and K*5-K*8, but also K*3, K*4 
and K*9. It does not mean that K*3, K*4 and K*9 are redundant, i.e., deriv- 
able from the other postulates, but only that the mapping (K, *) i — ► |~ x >* 
is not injective. In fact, the reader will quickly realize that no postulate is 
redundant, though K*3 may be weakened to K*true C K in the presence 
of K*6 and K*7. We take this to mean that postulates K*3, K*4 and K*9 
say nothing about the nonmonotonic inference aspect of revision: they are 
orthogonal to it. 

4.2 Consequences of the representation theorem 

The first consequence that we shall draw from Theorem ^ is that the postulate 
K*9 does not constrain the ways one may revise a fixed theory K more than 
the AGM postulates already did: it only constrains the ways one may revise 
different theories by related formulas. If we consider an AGM revision * and 
a fixed theory K, there is a revision that satisfies K*l-K*9 and that revises 
the theory K, for any formula ip, exactly as does *. 

Theorem 3 Let * a revision that satisfies the AGM postulates K*l to K*8. 
Then, for any theory K, there exists a revision *k that satisfies K*l-K*9 
and such that, for any ip, K*p> = K*k<P- 

Proof: Let * a revision that satisfies the AGM postulates K*l to K*8 and K 
an arbitrary theory. By Theorem [I], the relation |~^'*, defined in equation ([I]) 
is rational and consistency-preserving. For simplifying notations, we shall 
denote by |~. By Theorem |2], the revision defined in equation ^|, 

satisfies K*l-K*9. But, for any ip, 
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Therefore, by equation (]T|), 




K*ip if -itp e K 
Cn(K, ip) otherwise. 



But the right hand-side is equal to K*(p. | 

From the proof above, one sees that the revision *k is defined by: 




K*ip if -<(p G L 
Cn(L, ip) otherwise. 



(5) 



An model-theoretic description of * will be given now. Suppose * satisfies 
K*l K*9, and |~* is the rational, consistency-preserving relation associated 
to it by equation Let M be any ranked model that defines |~* (see |16| ). 
Note, that, since |~* is consistency-preserving, every propositional model is 
the label in M of some state. For any theory K, let us define Mk as the 
ranked model obtained from M by creating, below the states of lowest rank 
in M, a new level containing a state for each propositional model of K (and 
labeled by this model). Note that M = Mk ± - It is clear that Mk is a ranked 
model. Let be the rational relation defined by Mk- 

Proposition 13 ip £ K*ip iff ip Y^m k ip 

Proof: The result follows from equation (fj) and the definition of I~a/ a -- 
Note that there is some state at the lowest rank in Mk that satisfies f iff 
-up ^ K. In this case ip Y^m k ^ iff "0 € Cn(K, ip). | 

An important remark, that will be developed in section |5.1| , is that, even 
though M (and |~*) may be recuperated back from M K by leaving out the 
states of lowest rank, there is not enough information in Y^m k to determine 
|~*, or I~a/ l for L ytz K. Think that one may be build a model M' K from 
Mk by leaving out all the states of Mk that satisfy K except the states of 
lowest rank. The model M' K defines the same relation as Mk, but no trace 
is left in it of the original ranks in M of the states that satisfy K. Our next 
consequence of the representation theorem is the converse of Theorem [TJ. 

Theorem 4 Let |~ be an arbitrary, rational, consistency-preserving relation. 
There is a theory K and a revision * that satisfies K*l-K*9 such that ip\~ ip 
iff ip £ K*ip. 
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Proof: Let |~ be as above. Take K — {a | true |~ a}. It is clear that K is 
a theory. Take * == defined in equation For any ip, we have: 




{tjj | <p |~ ip} if -itp G K 
Cn(K, ip) otherwise. 



By the definition of K: 




{ip | <p |~ V} if true |~ -!</? 
Cn(K, ip) otherwise. 



But |~ is rational and: K*ip = {ip \ f l~ ip}- I 

4.3 Revising with a rational, consistency-preserving 
relation 

The definition of the revision *^ in equation (|J) proposes a certain ontology 
for theory revision. The agent has a certain rational, consistency-preserving 
relation in mind. This relation describes, as far as the agent knows, what 
follows from what by default, or in normal circumstances. When it receives 
some new information ip, the agent revises its current belief set K by either 
adding ip to its current belief set, if ip does not contradict K, or, if it con- 
tradicts K, by forgetting about K altogether and adopting tp and all default 
assumptions that go with ip as its new belief set. In the latter situation, the 
agent adopts not only ip but all its usual, normal consequences also. This 
process seems very reasonable: when learning ip that contradicts its current 
beliefs K, the agent should probably not try to throw away as little of pos- 
sible of K to accommodate just ip but should throw away enough of K to 
accommodate also the most plausible consequences of ip. Remember that it 
is a basic assumption of the AGM approach that ip is more reliable than K, 
so we are only saying that the default, i.e. normal, consequences of ip should 
also be considered more secure than K. If, for example, one's theory says it 
should rain in Paris and in Orleans and one learns that there are no clouds 
in the sky of Paris, one has a choice between two revisions: conclude that it 
does not rain in Paris but rains in Orleans, or conclude that it rains neither 
in Paris nor in Orleans. If one holds the default assumption that when the 
sky is cloudless in Paris it does not rain in Orleans, the second way of revising 
seems more reasonable: it gives precedence to the default "when there are 
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no clouds in Paris, it does not rain in Orleans" to the proposition "it rains 
in Orleans" that was in the original theory. Note that this does not contra- 
dict the principle of maximal retention, since the original theory contained 
both "when there are no clouds in Paris, it does not rain in Orleans" and 
"it rains in Orleans" , and one could not keep both of them in the face of the 
information that "there are no clouds in Paris" . 

In the process of iterated revisions considered here, the agent revises its 
beliefs with new information, using its knowledge of how things generally, 
or normally, behave. This knowledge is encoded in a rational, consistency- 
preserving relation. The agent does not revise its relation, i.e., its default 
knowledge. There is a lot to be said for this analysis: default assumptions are 
typically much more stable than beliefs, and so it should be. Consider, for 
example, the physicist revising his/her theory about the world in light of the 
results of new experiments. The method used in performing this revision, 
i.e., deciding what to keep and what to throw away of the old theory, is 
a matter of meta-principles, a methodological question, not a question of 
physics. There is no reason to think that the result of this new experiment 
will change anything in the methodological principles our physicist is using. 
Nevertheless, there must also be another process at work: the revision (or 
the creation) of default assumptions. After all, those default assumptions, 
or these meta-principles come from the observation of evidence. Decision 
theory seems to be mainly interested in this process of formation or revision 
of default assumptions in the light of new evidence. It operates on a longer 
time scale than the revisions considered here and this paper has nothing to 
say about it. The revisions we consider are revisions of belief sets performed 
under a fixed set of default assumptions. 

5 Closing remarks 

5.1 Two viewpoints on iterated revisions 

We have described and developed what we think is the original AGM view- 
point concerning revisions. Revisions have two arguments: a theory to be 
revised and a formula by which it is revised. Iterated revisions do not de- 
serve any special consideration. Suppose an agent holds * as its revision 
procedure. If, at some point in time, it has belief set K and learns (p it will, 
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then, acquire belief set K*ip. If the agent later learns ip, it will just use the 
same revision * to revise its current belief set K*ip, by the new information 
i/j, thus obtaining K*p*ip as its new belief set. In this process, the belief 
revision process, *, does not change. From this point of view, the revision 
process is fixed: theories are revised but the revision method stays fixed. This 
is the static viewpoint. 

There is a different point of view, that has been illustrated in a number 



of recent works on iterated revisions, notably ||, [|J and p4| . This point 
of view seems to be rooted in Bayesian decision theory and to draw on [^3| . 
This alternative, dynamic, point of view has attracted most of the attention 
recently given to theory revision and can be described as follows. The agent 
starts with a belief set K and a method for revising K when some new 
information will come along, i.e., the agent knows only how to revise K, 
its belief set, it does not know how to revise arbitrary theories. If some 
new information comes along, it will revise K with this new information 
<p, following its method and obtain a new belief set K', but it will also 
adapt its revision method to be able to revise K' when new information will 
eventually come along. From this point of view, the new information ip does 
not only modify the belief set it also modifies the revision method. This 
dynamic viewpoint presents a departure from the AGM static framework. 
It even seems that those two points of view are incompatible. It will be 
shown, first, that a dynamical viewpoint does not provide a static revision 
operator, and then, that a static revision operator does not provide a method 
for dynamically adapting revisions. 

Let us take the dynamical viewpoint. 

• In the dynamic view the new revision procedure by which K*ip will be 
revised depends on 99, whereas, in the static view it should not. 

• It must not be the case that all theories may be obtained starting from 
K by iterated revisions, whereas the static view insists on being capable 
of revising arbitrary theories. 

• It must not be the case that the revision of a theory by a formula 
is determined by the theory and the formula. It may depend on the 
sequence of revisions that led to the theory. In other terms, it may 
happen that K is identical with K*ip*ifj without implying that K*x is 
identical with K*tp*il»x- 
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Let us take the static viewpoint, now. The static viewpoint proposes 
K*ip*ip for the result of revising K, successively, first by ip and then by (p. 
The dynamic viewpoint says this iterated revision should be the result of 
revising K*ip by ip, using the revision method obtained by adapting the revi- 
sion fj, = f x 1 — * K*X to the new information ip. But, in section [4.2| , following 
Proposition QT3D, we noticed that /ji does not contain enough information to 



determine *. The mapping v = f (p i — > K*tp*ip is not determined by K*i(j 
and fj, alone. The method proposed in this paper for revising with a ratio- 
nal, consistency-preserving relation does not yield any method for adapting 
revisions, any transmutation in the terms of p3 . 



5.2 Conclusion and future work 

Building on previous work by many researchers, we have completed the anal- 
ysis of the relation between the extended AGM postulates for theory revision 
and properties of nonmonotonic inference. It was known that one may asso- 
ciate rational, consistency-preserving relations to any revision that satisfies 
the AGM postulates. We have shown that any such relation is associated 
with exactly one revision that satisfies the AGM postulates and an addi- 
tional one. The open questions on which further work is needed have to do 
with generalizing the results of this paper to larger classes of revisions and 
nonmonotonic systems. 

One may ask if our results can be generalized to the revisions that satisfy 
only the postulates: K*l K*7. Those revisions are known to be intimately 
related to preferential relations Preferential relations may stand in one- 
to-one correspondence with the revisions that satisfy K*l K*7 and K*9. 

An orthogonal avenue seems also interesting. We noticed that K*3 and 
K*4 have no influence on the nonmonotonic aspect of revision. The revisions 
that satisfy K*l, K*2 and K*5-K*8 seem an interesting class to study. 

We noticed that, in the AGM framework, the theories to be revised were 
unstructured sets of formulas. One would like to put some more structure on 
those theories. Such additional structure, on K, should probably constrain 
the revisions of the revised theories of the form K*ip. The analogy between 
(unstructured) theory revision and nonmonotonic inference should probably 
lift to an analogy between generalized theory revision and conditional logic. 
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